Unscored severity · published Jun 22, 2010
CVE-2010-1632
Apache Axis2 before 1.5.2, as used in IBM WebSphere Application Server (WAS) 7.0 through 7.0.0.12, IBM Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, IBM Feature Pack for…
–
CVSS
22.4%
EPSS
No
On KEV
Description
Apache Axis2 before 1.5.2, as used in IBM WebSphere Application Server (WAS) 7.0 through 7.0.0.12, IBM Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, IBM Feature Pack for Web 2.0 1.0.1.0, Apache Synapse, Apache ODE, Apache Tuscany, Apache Geronimo, and other products, does not properly reject DTDs in SOAP messages, which allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via a crafted DTD, as demonstrated by an entity declaration in a request to the Synapse SimpleStockQuoteService.
Exploitation
Is it being used?
Exploit prediction (EPSS)22.4% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AX
Axis2 · Apache
through 1.5.1; 1.3; 1.4; 1.4.1; 1.5; through 1.5.1; +19 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1632
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1632
geronimo.apache.org
http://geronimo.apache.org/2010/07/21/apache-geronimo-v216-released.html
geronimo.apache.org
http://geronimo.apache.org/21x-security-report.html
geronimo.apache.org
http://geronimo.apache.org/22x-security-report.html
markmail.org
http://markmail.org/message/e4yiij7lfexastvl
Vendor Advisory
http://secunia.com/advisories/40252
Vendor Advisory
http://secunia.com/advisories/40279
More from Axis2
–
CVE-2012-5785
Apache Axis2/Java 1.6.2 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509…
–
CVE-2012-5351
Apache Axis2 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack," a…
–
CVE-2012-4418
Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."
–
CVE-2010-0219
Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account,…
–
CVE-2010-2103
Cross-site scripting (XSS) vulnerability in axis2-admin/axis2-admin/engagingglobally in the administration console in Apache Axis2/Java 1.4.1, 1.5.1, and possibly other versions,…